 |
教程: Linux教程-网络管理-使samba 2.0 加入NT域 |
 |
|
|
| 教程: Linux教程-网络管理-使samba 2.0 加入NT域 |
|
|
|
|
使samba 2.0 加入NT域
-----------------------------------
In order for a Samba-2 server to join an NT domain, you must first add the
NetBIOS name of the Samba server to the NT domain on the PDC using Server
Manager for Domains. This creates the machine account in the domain (PDC)
SAM.Note that you should add the Samba server as a "Windows NT Workstation or
Server", NOT as a Primary or backup domain controller.
为了使samba-2服务器加入到一个NT域中，你必须先使用域中PDC上的服务器管理器把
samba服务器的NetBIOS名加入到NT域中，并在主域控制器上的安全账号管理器数据库中创
建这个机器的账号。注意你应该把samba服务器作为“Windows NT工作站或服务器”加入
到域，而不是一个主域或备份域控制器。
Assume you have a Samba-2 server with a NetBIOS name of SERV1 and are joining
an NT domain called DOM, which has a PDC with a NetBIOS name of DOMPDC and
two backup domain controllers with NetBIOS names DOMBDC1 and DOMBDC2.
假定你有一个NetBIOS名是SERV1的samba-2服务器，并要加入名为DOM的NT域，域中有一个
NetBIOS名为DOMPDC的主域控制器和两个NetBIOS名为DOMBDC1及DOMBDC2的备份域控制器。
In order to join the domain, first stop all Samba daemons and run the
command
为了加入这个域，首先要停止所有的samba守护程序并运行命令：smbpasswd -j DOM -r
DOMPDC
as we are joining the domain DOM and the PDC for that domain (the only
machine that has write access to the domain SAM database). If this is
successful you will see the message:
把域DOM和域的主域控制器(对域的SAM数据库有写权限的机器)作参数来使samba服务器加
入DOM域。如果顺利你将在终端窗口中看到这样的信息：
smbpasswd: Joined domain DOM.
in your terminal window. See the smbpasswd man page for more details.
参见smbpasswd可以得到更多的详细信息。
This command goes through the machine account password change protocol, then
writes the new (random) machine account password for this Samba server into
the a file in the same directory in which an smbpasswd file would be stored
(normally :
这个命令通过机器账号改变协议，然后把一个新的(随机的)samba服务器机器账号写入与
存放smbpasswd文件相同目录(通常是：/usr/local/samba/private)下的一个文件中。
The filename looks like this:
文件名看起来象这样： . .mac
The .mac suffix stands for machine account password file. So in our example
above, the file would be called:
.mac后缀代表机器账号口令文件。所以在以上的例子中，文件名应该是：
DOM.SERV1.mac
This file is created and owned by root and is not readable by any other user.
It is the key to the domain-level security for your system, and should be
treated as carefully as a shadow password file.
此文件由root建立并拥有，而其它用户不可读。对你系统采用的domain-level安全级来说
是个关键，应该象影子口令文件一样仔细对待。
Now, before restarting the Samba daemons you must edit your smb.conf file to
tell Samba it should now use domain security.
好了，在重启samba守护程序之前你必须编辑smb.conf文件以通知samba使用域安全级。
Change (or add) your
line in the [global] section of your smb.conf to read:
修改或者加入smb.conf文件中[global]段的"security ="行：security = domain
Next change the
line in the [global] section to read:
然后修改[global]段的"workgroup ="行：workgroup = DOM
as this is the name of the domain we are joining.
标出我们要加入的域的名称。
You must also have the parameter "encrypt passwords" set to "yes" in order
for your users to authenticate to the NT PDC.
你也必须在参数"encrypt passwords"中设定"yes"以便用户可以在NT主域控制器上进行认
证。
Finally, add (or modify) a:
line in the [global] section to read:
最后加入或修改[global]段的"password server ="行：password server = DOMPDC
DOMBDC1 DOMBDC2
These are the primary and backup domain controllers Samba will attempt to
contact in order to authenticate users. Samba will try to contact each of
these servers in order, so you may want to rearrange this list in order to
spread out the authentication load among domain controllers.
这些参数是samba为了用户认证而尝试联系的主或者备份域控制器。samba将试着按次序联
系每个服务器，所以你可以按次序重新排列这个列表以便在这些域控制器之间均衡认证工
作的负载。
Alternatively, if you want smbd to automatically determine the list of Domain
controllers to use for authentication, you may set this line to be :
如果你想让smbd自动检测域控制器的列表以便进行用户认证，可以设置这样的可选项：
password server = * <
[1] [2] 下一页
|
|
| 教程录入：admin 责任编辑：admin |
|
|
上一篇教程： 教程: Linux教程-网络管理-利用Linux的Samba服务模拟NT域
下一篇教程： 教程: Linux教程-网络管理-如何使用UUCP |
|
|
|
|
|
|
|
| 【字体：小 大】【发表评论】【加入收藏】【告诉好友】【打印此文】【关闭窗口】 |
|
|
|
|
|
